{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,18]],"date-time":"2026-08-18T01:58:58Z","timestamp":1787018338905,"version":"build-2736575974"},"publisher-location":"New York, NY, USA","reference-count":44,"publisher":"ACM","license":[{"start":{"date-parts":[[2012,11,14]],"date-time":"2012-11-14T00:00:00Z","timestamp":1352851200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2012,11,14]]},"DOI":"10.1145\/2398776.2398821","type":"proceedings-article","created":{"date-parts":[[2012,11,20]],"date-time":"2012-11-20T15:50:26Z","timestamp":1353426626000},"page":"427-440","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":22,"title":["Taster's choice"],"prefix":"10.1145","author":[{"given":"Andreas","family":"Pitsillidis","sequence":"first","affiliation":[{"name":"University of California, San Diego, San Diego, California, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chris","family":"Kanich","sequence":"additional","affiliation":[{"name":"University of Illinois, Chicago, Chicago, Illinois, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Geoffrey M.","family":"Voelker","sequence":"additional","affiliation":[{"name":"University of California, San Diego, San Diego, California, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kirill","family":"Levchenko","sequence":"additional","affiliation":[{"name":"University of California, San Diego, San Diego, California, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Stefan","family":"Savage","sequence":"additional","affiliation":[{"name":"University of California, San Diego, San Diego, California, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2012,11,14]]},"reference":[{"key":"e_1_3_2_2_1_1","unstructured":"Alexa. Alexa top 500 global sites. http:\/\/www.alexa.com\/topsites June 2011.  Alexa. Alexa top 500 global sites. http:\/\/www.alexa.com\/topsites June 2011."},{"key":"e_1_3_2_2_2_1","volume-title":"Proc. of 16th USENIX Security","author":"Anderson D. S.","year":"2007"},{"key":"e_1_3_2_2_3_1","volume-title":"Proc. of 1st MLNIA","author":"Androutsopoulos I.","year":"2000"},{"key":"e_1_3_2_2_4_1","volume-title":"Proc. of 5th CEAS","author":"Beverly R.","year":"2008"},{"key":"e_1_3_2_2_5_1","volume-title":"Proceedings of RANLP-2001","author":"Carreras X.","year":"2001"},{"key":"e_1_3_2_2_6_1","volume-title":"Proc. of 6th CEAS","author":"Clayton R.","year":"2009"},{"key":"e_1_3_2_2_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/72.788645"},{"key":"e_1_3_2_2_8_1","unstructured":"G. Gee and P. Kim. Doppleganger Domains. http:\/\/www.wired.com\/images_blogs\/threatlevel\/2011\/09\/Doppelganger.Domains.pdf 2011.  G. Gee and P. Kim. Doppleganger Domains. http:\/\/www.wired.com\/images_blogs\/threatlevel\/2011\/09\/Doppelganger.Domains.pdf 2011."},{"key":"e_1_3_2_2_9_1","volume-title":"Proc. of 6th CEAS","author":"Guerra P. H. C.","year":"2009"},{"key":"e_1_3_2_2_10_1","volume-title":"Proc. of 7th CEAS","author":"Guerra P. H. C.","year":"2010"},{"key":"e_1_3_2_2_11_1","volume-title":"Proc. of 6th NSDI","author":"John J. P.","year":"2009"},{"key":"e_1_3_2_2_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/1455770.1455774"},{"key":"e_1_3_2_2_13_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-00975-4_22"},{"key":"e_1_3_2_2_14_1","volume-title":"Proc. 1st USENIX LEET","author":"Kreibich C.","year":"2008"},{"key":"e_1_3_2_2_15_1","volume-title":"Proc. of 2nd USENIX LEET","author":"Kreibich C.","year":"2009"},{"key":"e_1_3_2_2_16_1","unstructured":"M. Lee. Why My Email Went. http:\/\/www.symantec.com\/connect\/blogs\/why-my-email-went 2011.  M. Lee. Why My Email Went. http:\/\/www.symantec.com\/connect\/blogs\/why-my-email-went 2011."},{"key":"e_1_3_2_2_17_1","volume-title":"Proc. of USENIX Security","author":"Leontiadis N.","year":"2011"},{"key":"e_1_3_2_2_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2011.24"},{"key":"e_1_3_2_2_19_1","volume-title":"Proc. of 4th USENIX LEET","author":"Liu H.","year":"2011"},{"key":"e_1_3_2_2_20_1","unstructured":"M86 Security Labs. Top Spam Affiliate Programs. http:\/\/www.m86security.com\/labs\/traceitem.asp?article=1070 2009.  M86 Security Labs. Top Spam Affiliate Programs. http:\/\/www.m86security.com\/labs\/traceitem.asp?article=1070 2009."},{"key":"e_1_3_2_2_21_1","unstructured":"Marshal8e6 TRACELabs. Marshal8e6 Security Threats: Email and Web Threats. http:\/\/www.marshal.com\/newsimages\/trace\/Marshal8e6_TRACE_Report_Jan2009.pdf 2009.  Marshal8e6 TRACELabs. Marshal8e6 Security Threats: Email and Web Threats. http:\/\/www.marshal.com\/newsimages\/trace\/Marshal8e6_TRACE_Report_Jan2009.pdf 2009."},{"key":"e_1_3_2_2_22_1","doi-asserted-by":"publisher","DOI":"10.5555\/1764441.1764465"},{"key":"e_1_3_2_2_23_1","volume-title":"Proc. of the USENIX Security Symposium","author":"McCoy D.","year":"2012"},{"key":"e_1_3_2_2_24_1","volume-title":"Proc. of 1st USENIX LEET","author":"McGrath D. K.","year":"2008"},{"key":"e_1_3_2_2_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/1299015.1299016"},{"key":"e_1_3_2_2_26_1","volume-title":"Proc. of 1st USENIX LEET","author":"Nelson B.","year":"2008"},{"key":"e_1_3_2_2_27_1","unstructured":"ODP { Open Directory Project. http:\/\/www.dmoz.org September 2011.  ODP { Open Directory Project. http:\/\/www.dmoz.org September 2011."},{"key":"e_1_3_2_2_28_1","volume-title":"Proc. of 1st USENIX LEET","author":"Pathak A.","year":"2008"},{"key":"e_1_3_2_2_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/1555349.1555352"},{"key":"e_1_3_2_2_30_1","volume-title":"Proc. of 17th NDSS","author":"Pitsillidis A.","year":"2010"},{"key":"e_1_3_2_2_31_1","volume-title":"Proc. of 17th NDSS","author":"Qian Z.","year":"2010"},{"key":"e_1_3_2_2_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315288"},{"key":"e_1_3_2_2_33_1","volume-title":"Proc. of Virus Bulletin Conference","author":"Samosseiko D.","year":"2009"},{"key":"e_1_3_2_2_34_1","volume-title":"Proc. of 7th CEAS","author":"Sanchez F.","year":"2010"},{"key":"e_1_3_2_2_35_1","volume-title":"Proc. of 3rd MALWARE","author":"Sinha S.","year":"2008"},{"key":"e_1_3_2_2_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/2030376.2030395"},{"key":"e_1_3_2_2_37_1","unstructured":"Trustwave. Spam Statistics { Week ending Sep 2 2012. https:\/\/www.trustwave.com\/support\/labs\/spam_statistics.asp September 2012.  Trustwave. Spam Statistics { Week ending Sep 2 2012. https:\/\/www.trustwave.com\/support\/labs\/spam_statistics.asp September 2012."},{"key":"e_1_3_2_2_38_1","unstructured":"G. Warner. Random Pseudo-URLs Try to Confuse Anti-Spam Solutions. http:\/\/garwarner.blogspot.com\/2010\/09\/random-pseudo-urls-try-to-confuse-anti.html Sept. 2010.  G. Warner. Random Pseudo-URLs Try to Confuse Anti-Spam Solutions. http:\/\/garwarner.blogspot.com\/2010\/09\/random-pseudo-urls-try-to-confuse-anti.html Sept. 2010."},{"key":"e_1_3_2_2_39_1","volume-title":"Proc. of 7th CEAS","author":"Wei C.","year":"2010"},{"key":"e_1_3_2_2_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/1920261.1920287"},{"key":"e_1_3_2_2_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/2030376.2030391"},{"key":"e_1_3_2_2_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/1402958.1402979"},{"key":"e_1_3_2_2_43_1","volume-title":"Proc. of 1st USENIX LEET","author":"Zhuang L.","year":"2008"},{"key":"e_1_3_2_2_44_1","volume-title":"Social Science Research Network","author":"Zittrain J.","year":"2007"}],"event":{"name":"IMC '12: Internet Measurement Conference","location":"Boston Massachusetts USA","acronym":"IMC '12","sponsor":["SIGMETRICS ACM Special Interest Group on Measurement and Evaluation","SIGCOMM ACM Special Interest Group on Data Communication","USENIX Assoc USENIX Assoc"]},"container-title":["Proceedings of the 2012 Internet Measurement Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2398776.2398821","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2398776.2398821","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T08:18:47Z","timestamp":1750234727000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2398776.2398821"}},"subtitle":["a comparative analysis of spam feeds"],"short-title":[],"issued":{"date-parts":[[2012,11,14]]},"references-count":44,"alternative-id":["10.1145\/2398776.2398821","10.1145\/2398776"],"URL":"https:\/\/doi.org\/10.1145\/2398776.2398821","relation":{},"subject":[],"published":{"date-parts":[[2012,11,14]]},"assertion":[{"value":"2012-11-14","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}